Do pseudo packets have PKT_ALLOC set or not set?

From: Eric Leblond [mailto:notifications@github.com]
Sent: Wednesday, June 26, 2013 4:20 AM
To: inliniac/suricata
Cc: Kenneth Steele
Subject: Re: [suricata] Initial Tile mPIPE support (#403)


In src/decode.h:

> @@ -639,7 +650,7 @@ enum {

>          (p)->dp = 0;                            \

>          (p)->proto = 0;                         \

>          (p)->recursion_level = 0;               \

> -        (p)->flags = (p)->flags & PKT_ALLOC;    \

> +        (p)->flags = (p)->flags & (PKT_ALLOC | PKT_MPIPE); \

I think we should also take pseudo packets into consideration. They are created during things like defrag or tunnel handling operations. So we can't get rid of allocated Packets (1).

—
Reply to this email directly or view it on GitHub<https://github.com/inliniac/suricata/pull/403/files#r4886128>.